Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File:                     8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier:          nqrFvbB88Yt9eq1Va3Wqg0LVAo85WOy/2i8p04NsTGE=
Subject key identifier:   D2:06:FD:DE:31:C9:73:F5:C4:73:D5:E7:B4:FF:0F:E5:70:ED:03:7F
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer:       /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial:       019369D8E2ADB27660969173E113407391AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number:          07CB
Signing time:             Tue 26 Nov 2024 19:00:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:41 +0000
Files and hashes:         1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: 8s2oIpYmHlv+Cdlc4oyXfIShpx6kRLOVGyhLuECSl4Y=)
                          2: Il_-mS2h5g2nqr5-CBlUmRVV8IU.roa (hash: 0f+jPHZgjfNHT/ukKaqcxpJDOKAo2AGMTvpOcCD4Tek=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:e2:ad:b2:76:60:96:91:73:e1:13:40:73:91:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
        Validity
            Not Before: Nov 26 19:00:41 2024 GMT
            Not After : Nov 27 19:00:41 2024 GMT
        Subject: CN=d206fdde31c973f5c473d5e7b4ff0fe570ed037f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:95:a8:e7:93:03:2f:7f:9b:4d:40:ab:95:5b:
                    5e:ba:a2:ed:24:20:25:f2:c5:f2:8d:57:63:1f:1f:
                    e2:6c:f8:f1:a7:af:4e:a9:d1:22:b1:64:b9:94:52:
                    44:32:bf:b1:ec:13:49:23:d0:eb:20:3d:e6:6c:23:
                    c3:35:5b:15:c2:5e:32:46:1e:3c:59:a2:e5:11:dc:
                    b7:4e:53:36:f6:af:30:9f:86:10:78:3d:b1:37:49:
                    48:08:b2:53:f2:98:cc:2a:c8:2e:d9:0b:93:1e:04:
                    37:b2:d4:4a:97:93:6a:2a:4c:da:57:b0:a0:d5:5e:
                    af:6b:51:58:b8:76:47:80:f0:30:bf:bb:a8:5f:81:
                    7d:86:1c:44:ee:bf:f4:b7:50:a9:b7:33:3b:1c:23:
                    34:b2:ff:dc:35:b4:e1:21:33:45:c1:84:e2:f8:bf:
                    e3:17:7a:a7:51:94:95:6d:8d:78:59:4b:04:0d:9a:
                    d3:99:7d:9e:0d:ff:5c:95:ac:58:1c:0f:f0:76:e9:
                    de:ef:44:c5:11:9d:ae:5c:b6:6f:9a:ed:b7:78:f1:
                    ac:02:77:14:fc:63:91:c1:f2:8e:f8:f4:0a:89:79:
                    28:bc:ac:e1:7e:d0:d3:e5:11:41:96:b5:1e:39:ab:
                    40:9a:88:c6:7a:e5:a8:e1:c5:12:fc:bc:df:ca:14:
                    cd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:06:FD:DE:31:C9:73:F5:C4:73:D5:E7:B4:FF:0F:E5:70:ED:03:7F
            X509v3 Authority Key Identifier:
                keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:47:24:af:d6:ae:13:5b:25:43:2f:b3:ea:2a:09:5c:e9:43:
         61:79:65:14:75:4e:14:fe:2d:f4:04:3f:93:a1:05:4d:e1:c1:
         6a:28:a0:60:a7:78:0f:2c:4a:8b:a0:0d:55:fc:ba:cf:76:c8:
         8b:6b:63:fe:1b:29:db:c4:08:a4:1d:a7:48:0b:3b:7d:46:bd:
         74:22:f0:09:df:28:3c:51:4f:f3:12:a3:ca:e7:b4:0f:d7:40:
         10:b8:64:6a:c5:8b:9b:82:5c:7c:8b:c5:e9:8a:75:41:6f:df:
         4c:87:4f:ba:e3:a5:bc:7a:e8:f1:37:d8:d9:f4:42:ca:6a:66:
         e6:a4:bc:13:63:ea:75:a7:84:59:f5:e5:a1:a7:83:2a:fd:aa:
         90:51:31:0d:97:1c:43:49:74:49:8b:81:35:2c:39:68:e5:75:
         f8:c2:78:84:9a:bc:c5:1a:8a:73:ea:d9:b5:d8:f0:e5:cc:61:
         d3:16:b1:d0:c7:86:30:43:87:86:56:f2:d6:14:ac:a4:63:2a:
         26:90:0a:87:5c:62:fc:0b:e8:a1:2e:00:2c:7b:3d:b5:63:4c:
         56:32:0a:c4:a5:e9:4c:97:c7:b3:63:4e:ae:f3:33:d6:67:78:
         a9:37:5d:d1:84:86:b2:f7:94:b6:28:0f:0d:3e:40:91:0c:07:
         17:8c:13:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:39 2024 by rpki-client on console-ams.rpki-client.org